We have been rolling out an emergency workaround to a critical security vulnerability (php2shell) released overnight, which impacts any servers running php (all versions)
For more information lookup CVE-2026-109618 and CVE-2026-109619.
The mitigation we are rolling out is only a temporary workaround until vendors release the security patches (expected later today), and it may impact file uploads. It is currently being deployed to ….
New shared hosting (cp.blacknighthosting.com)
Cloud3 VPS
Dedicated servers with management
Legacy shared hosting (cp.blacknight.com)
Blacknight infrastructure
Where we have access we will deploy to unmanaged customers once the above have completed.
Vendor patches are being released for current versions only (8.3 upwards ) so we advise customers to consider upgrading the version of php and enable automatic updates where applicable if running WordPress , Plesk, cPanel etc.